`build_dep` was a malicious crate on crates.io that attempted to send telemetry data from the build environment to an arbitrary URL. It had a single version published on 2025-03-03 and was removed approximately 20 months later. There is no evidence that it was actually used or had dependencies on crates.io.